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The data type identification unit (103) obtains a circulation content from an external source or obtains a not encrypted content from 
a record mediimi. When the obtained content has the CD type, the data registration unit (104) encrypts the obtained content and writes the 
encrypted content to the data storage unit (106). The data registration unit (104) obtains die ri^ts information from the rights management 
table (102), writes the data ID, encrypticm infr>nnation, rights informaticxi, and file name to the data management table (105), and writes 
the encryption information and the rights information to the data storage unit (106). When the obtained content is a cnciilation content, 
the data registration unit (104) writes the circulaticm content to the data storage unit (106), and writes the data ID, encryption information, 
rights information, and fite name to the data management table (105). 
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DESCRTPTTOK 

DATA MANAGEMENT APPARATUS, DATA MANAGEMENT METHOD, AND 
RECORD MEDIUM RECORDING DATA MANAGEMENT PROGRAM 

TECHNICAL FIELD 

The present invention relates to a system which deals 
with digital contents distributed in a market • More 
particularly, the present invention relates to a technique for 
protecting digital contents. 

BACKGROUND ART 

Recently, various, a vast amount of . information has 
been digitized, including art such as literature, music, and 
still or moving images. Typically, digital contents are 
distributed among users via record mediums such as CDs or CD- 
ROMs or via a network (hereinafter, digital contents distributed 
via a network are called circulation contents). 

In the former case, users load distributed CDs into 
their personal conputers and enjoy the digital contents of, for 
exanqple, music recorded in the CDs. 

In the latter case, circulation contents are 
downloaded into personal computers via a network, where 
communications capabilities of the computers are used. 'Music 
Distribution Ready to Start" (Nikkei Electronics, No. 738, pp87 



i 
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to 111, Nikkei Business publications. Inc., issued on March s"*, 
1999) introduces an music distribution system. The music 
distribution system features a content control method. 
According to this method, each circulation content includes a 

5 pair of files A and B. The file A is con^osed of an encrypted 
music content, and the file B is composed of a decryption key 
and control information, the decryption key being used for 
decrypting the file A, and the control information indicating 
whether playing or copying of the file A is permitted or not. 

10 When the playing of the music content included in the file A is 
attempted, the control information included in the file B is 
used to judge whether the file A can be played or copied. 

The above-described music distribution system protects 
the contents from unauthorized operations of play, copy or the 

15 like by imposing a certain limit to such operations using the 
control information which indicates whether the operations on 
the contents corresponding to the control information are 

permitted or not. 

However, in reality, some circulation contents do not 
20 include the control information. It is also typical that CDs 
include xinencrypted music digital contents and do not include 
such control information- This brings a problem that digital 
contents are not sufficiently protected from unauthorized play 
or copy operations in personal computers. 
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DT5;CT.QSURE OF INVENTION 

It is therefore an object of the present invention to 
provide a data management apparatus^ a data management method^ 
and a record medivim recording a data management program which 
5 protect circulation contents not including the control 
information and digital contents recorded in record medivuns such 
as CDs or CD-ROMs, as well as circulation contents including the 
control information. 

The above object is fulfilled by a data management 

10 apparatus for managing digital contents distributed in a 
market, with corresponding rights information, the data 
management apparatus comprising: a rights information storage 
means for prestoring a separate piece of rights information for 
each type of digital content, each piece of rights information 

15 including play rights information indicating whether 
reproduction is permitted for contents of the type corresponding 
to the piece of play rights information; a content storage 
means; a content obtaining means for obtaining from an external 
source a digital content to which rights information has not' 

20 been added; a type identification means for identifying a type 
of the obtained digital content; a rights information reading 
means for reading rights information from the rights information 
storage means that corresponds to the type of the obtained 
digital content; a content writing means for writing the 

25 obtained digital content to the content storage means; and a 
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rights information writing means for writing the read rights 
information to the content storage means so as to correspond to 
"digital content written by the content writing means. 

With the above construction in which when having 
5 bbtained a content to which rights information has not been 
added, the data management apparatus stores the obtained content 
with corresponding rights information, it is possible to impose 
a limit to playing of the content in a similar way as 
"circulation contents" to which the rights information has been 

10 added. This enables the obtained content to be protected from 
unauthorized operations. 

In the cUDOve data management apparatus, the content 
writing means may further add the read rights information to the 
digital content written to the content storage means • 

15 With the above construction in which the data 

management apparatus adds the obtained rights information to the 
digital content written to the content storage means so that the 
content is stored with the same file type as "circulation 
contents", it is possible for apparatuses capable of managing 

20 circulation contents to which the rights information has been 
added beforehand to manage the content in the same way as the 
circulation contents. 

In the above data management apparatus, each piece of 
rights information may further include copy rights infoimation 

25 indicating whether a check out is permitted or not, wherein in 
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each check out, a digital content and a piece of copy rights 
information corresponding to the digital content are copied to 
an external device. 

With the above construction in which the rights 
information includes the copy rights infonaation as well as the 
play rights information, it is possible to impose a limit to 
check outs of the content as well as to playing of the content. 
This enables the obtained content to be protected from 
unauthorized operations » 

In the above data management apparatus, each piece of 
copy rights information may include the number of permitted 
check outs. 

With the above construction, the number of check outs 
performed on the content is limited to the number of permitted 
check outs. 

In the above data management apparatus, each piece of 
rights information may further include move rights information 
indicating whether a digital content and a piece of rights 
infonaation corresponding to the digital content are permitted 
to be moved to an external device. 

With the above construction in which the rights 
information includes the move rights information as well as the 
play rights information, it is possible to impose a limit to 
moving of the content as well as to playing of the content. 
This enables the obtained content to be protected from 
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iinauthorized operations. 
BRIEF DESCRIPTION OF DRAWINGS 

FIG. 1 shows a usage pattern of the data management 
apparatus 100 as an embodiment of the present invention. 

FIG. 2 is a block diagram showing the construction of 
the data management apparatus 100. 

FIG. 3 is a block diagram showing a detailed 
construction of the data management apparatus 100. 

FIG. 4 shows an example of the control method table 

101 in the data management apparatus 100. 

FIG. 5 shows an exanple of the rights management table 

102 in the data management apparatus 100. 

FIG. 6 shows an example of the data management table 
105 in the data management apparatus 100. 

FIG. 7 is a flowchart showing the operation of the 
data management apparatus 100. 

FIG. 8 shows a usage pattern of the data management 
apparatus 800 as another embodiment of the present invention. 

FIG. 9 is a block diagram showing the construction of 
the data management apparatus 800. 

FIG. 10 shows an example of the control method table 
813 in the data management apparatus 800. 

FIG. 11 shows an example of the multi data management 
table 807 in the data management apparatus 800. 



Aft ■ 

wo 00/62292 PCT/JPOO/02229 

FIG. 12 is a flowchart showing the operation of the 
data management apparatus 800 in obtaining a content from an 
external source or a record medium such as CD or DVD. 

FIG- 13 is a flowchart showing the operation of the 
5 data management apparatus 800 in writing a content to the record 
medium 811. 

BEST MODE FOR CARRYING OUT THE I NVENTION 

A data management apparatus 100, an embodiment of the 

10 present invention, will be described. 

As shown in FIG. 1, the data management apparatus 100 
is connected to a network 20 via a coramvihi cation line 10, where 
the network 20 is, for exan^le, the Internet or a cable TV. A 
Web server 30 which supplies music information including music 

15 contents is also connected to the network 20. The data 
management apparatus 100 obtains music information from the Web 
server 30 and stores the obtained information. The data 
management apparatus 100 also reads out music infonnation 
including music contents from a CD 300 and stores the obtained 

20 information. The data management apparatus 100 plays and 
outputs the stored music information from speakers 154. 

In this way, users of the data management apparatus 
100 can enjoy music. 

1.1 Construction of Data Management Apparatus 100 



7 
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The data management apparatus 100, as shown in FIG- 
2, includes a control method table 101, a rights management 
^able 102, a data type identification unit 103, a data 
registration unit 104, a data management table 105, and a data 
5 storage unit 106. 

More specifically, as shovm in FIG. 3, the data 
management apparatus 100 includes a microprocessor 151, a RAM 
(Random Access Memory) 152, a display 153, speakers 154, a hard 
disk 156, a keyboard 157/ a cpmmunication unit 158, and a 
10 reading unit 159. The commtanication lonit 158 is connected to 
the communication line 10. A computer program has been stored 
in the hard disk 156. The data type . identification unit, 103 and 
the data registration unit 104 operate as the computer prograua 
runs in the data management apparatus 100 using the 
15 microprocessor 151. The control method table 101, the rights 
management table 102, the data management table 105, and the 
data storage unit 106 are achieved in the hard disk 156. 
Data Type Identification Unit 103 

The data type identification unit 103 includes the 
20 communication unit 158 which is connected to the Web server 30 
via the network 20 being, for example, the Internet or a cable 
TV. The data type identification unit 103 also includes the 
reading tinit 159 which reads out data from record mediiuos such 
as CDs and DVDs. 

25 The data type identification unit 103 obtains a 
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circulation content from the Web server 30 based on an 
instruction from the user. Each circulation content includes a 
file A and a file B. The file A includes an encrypted content 
such as an encrypted music content. The file B includes rights 
5 information which indicates whether play^ copy/ or move of the 
file A is permitted or not. The file B also includes encryption 
method information indicating an encryption method used for 
encrypting the encrypted content, and includes a decryption key 
used for decrypting the eaacrypted content. The data type 

10 identification unit 103 outputs the obtained circulation 
content, the file name of the file A, and information indicating 
" that the content to be sent is a circulation content to the data 
registration unit 104 . 

The data type identification unit 103, also based on 

15 an instruction from the user, reads out a not-encrypted content 
from a CD or DVD loaded into the data management apparatus 100 
cuid outputs the read-out not-encrypted content and information 
indicating either CD or DVD to the data registration unit 104. 

A type of the rights information which indicates 

20 whether play of the file A is permitted or not is referred to as 
play rights information. 

Another type of the rights information which indicates 
whether copy of the file A is permitted or not is referred to as 
copy rights information. The copy rights information also 

25 indicates whether a check out is permitted or not . and includes 

9 
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the number of permitted check outs. It should be noted here 
that in each "check out", a content and play rights information 
corresponding to the content are copied from the current 
apparatus to another apparatus and the ntimber of penaitted check 
outs for the content is reduced by one in. the current apparatus. 
Also, in each "check in", the play rights information 
corresponding to the content is returned from the other 
apparatus to the current apparatus and the number of permitted 
check outs for the content is increased by one in the current 
apparatus. In this case, the content having been copied to the 
other apparatus becomes unusable. 

A type of the rights information which indicates 
whether move of the file A is permitted or not is referred to as 
move rights information. Here, in each ^ove", a content and all 
types of rights information are copied from the current 
apparatus to another apparatus and the content is rendered 
unusable in the current apparatus for eternity, 
control Method Table 101 

The control method table 101, as shown in FIG. 4, 
includes a plurality of sets of a data type,, a data storage 
method, an encryption method, an encryption key generation 
method, a rights management method, and a rights presence 
information. 

The "data type" shows a data type of a content. In 
FIG. 4, "circulation content" indicates that the content has been 

10 
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obtained via the network, and *CD" and "DVD" indicate that the 
contents have been obtained from medixoms CD and DVD, 
respectively. 

The "data storage method" includes a script which shows 
a procedure for processing the content* 

In correspondence to "CD" shown in the "data type", the 
"data storage method" includes Script A which describes the data 
storage method as shown below. In correspondence to "DVD" shown 
in the "data type", the "data storage mettiod" includes Script A' 
which is similar to Script A. 

(Step 1) Generate an encryption key using an encryption key 
generation method corresponding to the data type "CD" included 
in the same set. 

(Step 2) Encrypt the content read out from a CD to generate an 
encrypted content using the generated encryption key and based 
on an encryption method corresponding to the data type "CD" 
included in the same set. 

(Step 3) Write the generated encrypted content to the data 
storage unit 106 as a file A. 

(Step 4) Refer to Script C included in the same set as the 
"rights management method", then in accordance with Script C, 
refer to the rights management table 102 and read out rights 
information corresponding to the data type "CD" in the same 
set. 

11 
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(Step 5) Refer to Script C included in the same set as the 
"rights management method", then in accordance with Script 
...jfaurite a data ID, encryption inf oirmation, rights information, and 
a file name in the data management ta:ble 105. Furtheinttore, 
5 write the encryption information and the rights information to 
the data storage unit 106 as a file B. Here, the data ID 
includes an identifier which uniquely corresponds to a content 
included in the CD. The encryption information is composed of 
an encryption ^lethod and an encryption key. The encryption 

10 method is used in Step 2 of Script A. The encryption key is 
generated in Step 1 of Script A. Each file name is composed of 
a file identifier, a separator and a file type ("dat" in the 

example shown in FIG. 6) . The file identifier uniquely 
corresponds to a content stored in the CD. The rights 

15 information is read out from the rights management table 102. 

In correspondence to data type "circulation content"/ 
the "data storage method" includes Script B described as 
follows. 
Script B 

20 (Step 1) Write the circulation contents obtained via the network 
to the data storage unit 106. 

(Step 2) Write the data ID, encryption information, rights 
information, and file name to the data management tcible 105. 
Here, the data ID is the file identifier constituting the file 
25 name of the file A obtained via the network. The encryption 

12 
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infonoation is composed of an encryption method and an 
encryption key. The encryption method is included in the file 
B obtained via the network. The encryption key is equal to the 
decryption key included in the file B obtained via the network. 
5 The rights information is obtained via the network. The "file 
name" is the file name of the file A obtained via the network. 

The encryption method is a method for encrypting the 
content. In the present example, as shown in FIGs. 4 and 6, the 
encryption method in conrespondence to the data types "CD" and 

10 "DVb" is "RSA". No encryption method is shown in correspondence 
to the data t^e "circulation content" in the same set. 

The encryption key generation method is used in the 
encryption method shown in the same set. In the present 
example, as shown in FIG. 4, the encryption key generation 

15 method corresponding to the data types "CD" and "DVD" is "random 
number generation". Here, when the data type is "DVD", the 
length of the first tune recorded in the DVD disc is used as the 
seed in generating random numbers. No encryption key generation 
method is shown in correspondence to the data type "circulation 

20 content" in the same set. 

In correspondence to "CD" shown in the "data type", the 
"rights management method" includes Script C which describes the 
rights management method as shown below. In correspondence to 
"DVD" shown in the "data type", the "rights management method" 

25 includes Script C which is similar to Script C. 

13 
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Script C 

(Step 1) Read out the rights information from the rights 
management table 102 and write the read rights information to 
the data management table 105. 

It should be noted here that no rights management 
method is included in correspondence to the data type 
•circulation content" in the same set. 

The rights presence information indicates whether 
rights infomation has been added to content. In the present 
example shown in FIG. 4, "0" indicates that the rights 
information has not been added to the content and "1" indicates 
that the rights information has been added to the content. As 
shown in FIG. 4, in the present ejiibodiment, the rights 
information has not been added to the content read out from a CD 
or DVD, and the rights information has been added to the 
circulation content. 
Rights Management Table 102 

The rights management table 102, as shown in FIG. 5, 
Includes a plurality of sets of a data type and rights 
information. 

The "data type" shows a data type of a content and 
includes either "CD" or "DVD" indicating that the content has been 
read out from a CD or a DVD, but does not include "circulation 
content". 

The rights information is composed of play rights 

14 
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information, copy rights information, and move rights 
information. The play rights information, copy rights 
information, and move rights information respectively show 
whether the user is permitted to play, copy, or move the 
5 content. "Available" indicates that the user is permitted to 
perform the operation. "Not available" indicates that the user 
is not permitted to perform the operation. 
Data Management Table 105 

The data manag^ent table 105, as shown in FIG. 6, 

10 includes a plurality of sets of a data ID, encryption 
information, rights information, and a file name. 

Each set of the data corresponds to a content stored 
in the data storage unit 106 in a one-to-one relationship. 

The data ID includes an identifier of the content • 

15 The encryption information is composed of an 

encryption method and an encryption key. The encryption method 
is used for encrypting the content identified by the data ID of 
the same set. The encryption key is used for encrypting the 
content identified by the data ID of the same set. 

20 The rights information is composed of play rights 

information, copy rights information, and move rights 
information. The play rights information, copy rights 
information, and move rights information respectively show 
whether the user is permitted to play, copy, or move the 

25 content. "Available" indicates that the usfer is permitted to 
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perform the operation. "Not available" indicates that the user 
is not permitted to perfoinna the operation. 

The "file name" is a file name of a file stored in the 
data storage \m±t 106 and including a content identified by the 
data ID of the same set. Each file name is composed of a file 
identifier r a separator ".", and a file type ("dat" in the example 
shown in FIG. 6) . The file identifier of the file name is equal 
to the identifier included in the data ID of the same set. 

In an - example shown in. FIG. 6, the content 
corresponding to a set 281 has the GD data type; and the content 
corresponding: to a set 282 has the circulation content data 
type. 

Data Registration Unit 104 

The data registration unit 104 receives from the data 
type identification unit 103 the circulation content^ the file 
name of the file A, and inf oannaation indicating that the sent 
content is a circulation content. The data registration unit 
104 also receives not-encrypted contents and information 
indicating either CD or DVD for each of the not-encrypted 
contents. 

When having received the information indicating that 
the sent content is a circulation content from the data type 
identification unit 103^ the data registration unit 104 obtains 
a script describing a data storage method corresponding to data 
type "circulation content" from the control method table 101^ and 
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executes the obtained script. 

When having received the information indicating that 
the sent content has been read from CD from the data . type 
identification xm±t 103, the data registration unit 104 obtains 
5 a script describing a data storage method corresponding to data 
type "CD" from the control method table 101, and executes the 
obtained script. When having received the information 
indicating that the sent content has been read from DVD, the 
data registration unit 104 performs similarly. 
10 Data storage Unit 106 

The data storage unit 106 stores contents in the same 
file type as the circulation contents which each include a file 
A and a file B. 

1.2 Qneration of Data Management Apparatus 100 
15 The operation of the data management apparatus 100 

will be explained with reference to the flowchart shown in FIG. 
7. 

When having obtained a circulation content from an 
external source, the data type identification unit 103 oiitputs 

20 the obtained circulation content, the file name of the file A, 
and information indicating that the content to be sent is a 
circulation content to the data registration unit 104. 
Alternatively, when having read out a not-encrypted content from 
a CD or DVD loaded into the data management apparatus 100, the 

25 data type identification unit 103 outputs the read-but not- 
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encrypted content and information indicating either CD or DVD to 
the data registration tmit 104 (step SlOl) . 

Vttien having received the information indicating that 
the sent content is a circulation content from the data type 
5 identification unit 103 (steps S103 and S104), the data 
registration unit 104 obtains a script describing a data storage 
method corresponding to "circulation content" included in the 
same set from the control method table 101, and executes the 
obtained script to write the file A of the circulation content 
10 including an encrypted content to the data storage unit 106 
(step S105), then writes the data ID, encryption information, 
rights information, iand file name to the data management table 

105 (step S106) . 

When having received the information indicating that 
15 the sent content has been read from CD from the data type 
identification unit 103 (step S103) , the data registration unit 
104 obtains a script describing a data storage method 
corresponding to "CD" in the same set from the control method 
table 101, and executes the obtained script to generate an 

20 encryption key using an encryption key generation method 
corresponding to "CD" (step Sill), encrypts the content and 
generates an encrypted content using the generated encryption 
key and based on an encryption method corresponding to "CD" in 
the same set (step S112) , writes the generated encrypted content 

25 to the data storagfe unit 106 (step S113) , refers to Script C 

18 
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describing the rights management method, then in accordance with 
Script C, refers to the rights management taible 102 amd read out 
rights information corresponding to "CD" in the same set (step 
3114), refers to Script C describing the rights management 
method, then in accordance with Script C, writes the data ID, 
encryption information, rights information, and file name in the 
data management table 105, and writes the encryption information 
and the rights information to the data storage unit 106 (step 
S115) • 

1,3 Byief fi^ccQunt 

As described above, in Embodiment 1, it is possible 
to protect not-encrypted contents of CDs or DVDs, as in 
circulation contents, by encrypting the contents with a certain 
encryption method and adding rights information to dLmpose a 
certain limit to operations like play, copy, and move. 

Also, even if a new data type is developed, it is 
possible to deal with the new data type without difficulty by 
adding the new data type, encryption method, encryption key 
generation method, rights management method, and rights 
information to the control method table 101 and the rights 
management table 102. 
2 EanbQdimgnt 2 

A data management apparatus 800, another embodiment 
of the present invention, will be described. 

As shown in FIG. 8, the data management aipparatus 800 
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is connected to a network 20, such as the Internet or a cable 
TV, via a communication line 10. A Web server 30 which supplies 
iQusic information including music contents is also connected to 
the network 20. Furthermore, an accounting server 40 for 
5 distributing the rights information to users in accordahce with 
usage charges confirmed to be payed by the users is connected to 
the network 20. The data management apparatus 800 obtains music 
information from the Web server 30 and stores the obtained 
information in itself. The data management apparatus 800, based 

10 on an instruction from the user, confirms that the user pays a 
usage charge for a desired content to the accounting server 40, 
and receives the rights information in accordance with the payed 
usage charge from the accounting server 40. The data management 
apparatus 800 also reads out music information including music 

15 contents from a CD 300 and stores the obtained information in 
itself. The data management apparatus 800, based on the 
received rights information, plays and outputs the stored music 
information from speakers 154. 

The data management apparatus 800, based on the 

20 received rights information, also writes the stored music 
information to a record medium 811. The user can load the 
record medium 811 with the music information written on it into 
a portable player 401, which plays and outputs the music 
information from headphones 402. The record medium 811 is 

25 achieved by a semiconductor memory card, for example. 
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In this way/ users of the data manageiaent apparatus 
800 can enjoy music. 

2-1 Construction of Data Management Aooaratus 800 

The data management apparatus 800/ as shown in FIG. 
5 9, includes a data type identification unit 801, a data type 
recording \init 802, a rights management table 803, an encrypting 
unit 804, a data storage unit 805, a multi data management table 
807, an accounting processing unit 808, a data control xinit 809, 
a type transformation unit 810^ an input unit 812, and a control 

10 method table 813. 

More specifically, as the data management apparatus 
100/ the data management apparatus 800 includies a 
microprocessor, a RAM, a display/ speakers, a record medium 
drive, a hard disk, a keyboard, a communication xinit, and a 

15 reading unit. The communication unit is connected to the 
communication line. A computer program has been stored in the 
hard disk. The data type identification unit iBOl, encrypting 
unit 804, accotanting processing xonit 808, data control unit 809, 
and type transformation trnit 810 operate as the coiq>uter program 

20 r\ins in the apparatus using the microprocessor. The data type 
identification unit 801 and the accounting processing unit 808 
includes the communication unit. The rights mcuiagement table 
803, data storage unit 805, multi data management table 807, and 
control method table 813 are achieved in the hard disk. 

25 invvt VnXt 812 
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The input unit 812, which is achieved by the keyboard 
and the like, receives source information, content identifiers, 
and content operation information from the user, where the 
source information indicates sources of contents / the content 
5 identifiers are identifiers of contents, and the content 
operation information indicates contents operations which are 
classified into play, copy, and move. 

Note that a source indicated by a piece of source 
information is one of an external source connected via the 
10 network and a record medium such as CD or DVD. 

The input unit 812 outputs the received source 
information and the content identifiers to the data type 
identification unit 801. The input unit 812 also outputs the 
received source information, content identifiers, and content 
15 operation information to the data control unit 809. 
Data type Identification Unit 801 

The data type identification unit 801 receives the 
source information and the content identifiers from the input 
xmit 812. 

20 The data type identification unit 801 is, like the 

data type identification unit 103 of the data management 
apparatus 100, connected to external sources via the network 
such as the Internet or a cable TV. 

The data type identification unit 801, when having 

25 received from the input unit 812 a content identifier and a 
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piece of source information which indicates an external source 
connected via the network^ obtains a circulation content 
identified by the received content identifier. Each circulation 
content includes a file A and a file B. The file A includes an 
encrypted content such as an encrypted music content. The file 
B includes rights information which indicates whether play, 
copy, or move of the file A is permitted or not. The file B 
also includes encryption method information indicating an 
encryption method used for encrypting the encrypted content, and 
includes a decryption key used for decrypting the encrypted 
content. The data type identification unit 801 outputs the 
obtained circulation content, the file name of the file A, and 
information indicating that the content to be sent is a 
circulation content to the data type recording unit 802. 

The data type identification unit 801 includes a 
reading unit for reading data frdm record medixams such as CDs 
and DVDs • 

The data type identification unit 801, when having 
received from the input unit 812 a content identifier cuid a 
piece of source information which indicates a record meditom such 
as CD or DVD, reads out a not-encrypted content identified by 
the received content identifier from a CD or DVD loaded into the 
reading unit and outputs the read-out hot-encrypted content and 
information indicating either CD or DVD to the data type 
recording unit 802. 

23 
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Rights Management Table 803 

Description of the rights management table 803 is 
omitted here since it is the same as the rights management table 
102 of the data management apparatus 100. 

CpntrQl i^gthQd T^b^g 83.3 

The control method table 813, as shown in FIG. 10, 
includes a plurality of sets of a data type, an encryption 
method, .and an encryption key generation method. 

The data type corresponds to. the source of the 
content- In FIG. 10, "CD" and "DVD" indicate that the contents 
have been read out from mediums CD and DVD, respectively. 

The encryption method is a method for encrypting the 
content. In the present example, as shown in FIG. ,10, the 
encryption method for "CD" and "DVD" is "RSA". 

The encryption key generation method is used in the 
encryption laethod included in the same set. In the presjent 
example, as shown in FIG. 10, the encryption key generation 
method corresponding to "CD" and "DVD" is "random number 
generation". Here, when the data type is "DVD", the length of 
the first time recorded in the DVD disc is used as the seed in 
generating random numbers. 
Data type Recording Unit 802 

The data type recording unit 802 receives f roin the 
data type identification unit 801 a circulation content, a file 
name of the file A, and information indicating that the sent . 
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content is a circtilation content. The data type recording unit 
802 also receives a not-encrypted content and information 
indicating either CD or DVD from the data type identification 
unit 801 • 

5 The data type recording unit 802, when having received 

a not-encrypted content and information indicating either CD or 
DVD from the data type identification unit 801, generates a 
random ntomber, then use the generated random number to generate 
a sequence of six characters which are to be used as a content 
10 identifier. 

The data type recording unit 802 then reads out, from 
the rights management table 803, rights information 
corresponding to the data type indicated by the received 
information. 

15 The data type recording unit 802 also reads out, from 

the control method table 813^ an encryption method and an 
encryption key generation method corresponding to the data type 
indicated by the received information, then generates an 
encryption key based on the read-out encryption key generation 

20 method. 

The data type recording \init 802 writes the generated 
six-character sequence as a data ID to the multi data management 
table 807. The data type recording unit 802 also writes the 
read-out encryption method, encryption key, and rights 
25 information to. the multi data management table 807. The data 
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type recording unit 802 generates a file name by combining the 
generated six-character sequence, and "dat" respectively as 

a file identifier, a separator, and a file type, then writes the 
generated file name to the multi data management table 807. The 
5 data type recording unit 802 also writes data type "CD" to the 
multi data management table 807. Note that the encryption 
information is composed of the encryption method and encryption 
key. 

The data type recording unit 802 outputs the received 
10 not-encrypted content, the read-out encryption method, the 
generated encryption key, and the file name to the encrypting 
unit 804. 

On receiving the circulation content, the file name 
of the file A, and information indicating that the sent content 

15 is a circulation content from the data type identification unit 
801, the data type recording unit 802 writes the following to 
the data storage \init 805: the file identifier constituting the 
file name of the received file A, as a data ID; the encryption 
method included in the received circulation content; the 

20 decryption key included in the received circulation content; the 
rights information included in the received circulation content; 
the file name of the received file A; and data type "circulation 
content". 



The data type recording \anit 802 then writes the 

26 
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received circulation content to the data storage unit 805. In 
doing so, the file name of the file A of the circulation content 
is also written as the file ncune of the circulation content to 
the data storage unit 805. 
5 Encrypting Unit 804 

On receiving a not-encrypted content, an encryption 
method, an encryption key, and a file name from the data type 
recording unit 802, the encrypting unit 804 encrypts the 
received not-encrypted conten^t using the received encryption key 

10 and based on the received encryption method to generate an 
encrypted content, then writes the generated encrypted content 
to the data storage unit 805. In doing so, the received file 
name is also written as the file name of the encrypted content 
to the data storage unit 805. 

15 Data Storage Unit 805 

The data storage unit 805 stores the encrypted 
contents generated by the encryption unit 804 and the 
circulation contents received by the data type recording unit 
802. 

20 Multi Data Management Table 8Q7 

The multi data management table 807, as shown in FIG. 
11, includes a plurality of sets of a data ID, encryption 
information, rights information, a file name, and a data type. 

Each set of data corresponds to a content stored in 
25 the data storage unit 805 in a one-to-one relationship. 
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The encryption information is composed of the 
encryption method and encryption key. The rights infoimation is 
composed of play rights information, copy rights information, 
and move rights inf ozonation. 

The data ID, encryption method, encryption key, play 
rights information, copy rights information, move rights 
information, and file name will not be detailed here since these 
elements are the same as those included in the data management 
table of the data management apparatus 100. 

The data type includes data types of the contents in 
correspondence to the sources of the contents. In the table, 
"circulation content" indicates that the content has been 
obtained via the network, and "CD" and "DVD" indicate that the 
contents have been read out from mediuzns CD and DVD, 
respectively. 

In an exanqple shown in FIG. 11> the content 
corresponding to a set 901 has . the CD data type; and the content 
corresponding to a set 902 has the circulation content data 
type. 

Accounti ng Processing Unit 808 

The accounting processing unit 808 is connected to 
external sources via a network such as the Internet or a cable 
TV. 

The accounting processing unit 808 receives a content 
identifier and. usage, information indicating how the content, is 
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used from the data control unit 809. 

The accounting processing unit 808, based on the 

received usage information, performs an accounting process in 

which the charge for the use of a content identified by the 
5 content identifier is payed to an external source, and receives 

the rights information in accordance with the payed usage charge 

from the external source. The rights information indicates 

whether play, copy, or move of the content is permitted or 

hot. - - ■ 

10 The accoxmting processing unit 808 replaces the rights 

information written in the multx data management table 807 in a 

set including the received content identifier, with the rights 

information received from the external source. 

Data Control Unit 809 
15 The data control unit 809 receives the source 

information, content idenfcif iier , and usage information from the 

input unit 812. 

The data control unit 809 conqpares the usage indicated 

by the received usage inforiaation with the rights information 
20 written in the same set as the received content identifier in 

the multi data management te^le 807 so as to judge whether the 

usage is available. 

More specifically, the data control unit 809 judges 

that the usage is available when the corresponding rights 
25 information written in the play rigfhts information, copy rights 
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information, or move rights information is "available"; and 
judges that the usage is not available when it is "not 
available". 

Having judged that the usage is available and a copy 
is available based on the copy rights information; the data 
control unit 809 instructs the type transformation unit 810 to 
transform the type of the content identified by the received 
content identifier to the type of the record meditim loaded into 
the type transformation unit 810 and to write the content with 
the transformed type to the record meditua. The data control 
unit 809 outputs the received content identifier to the type 
transformation unit 810. 

Having judged that the usage is not available and when 
the received source information indicates "CD" or "DVD", the data 
control unit 809 ends the process. 

Having judged that the usage is not available and when 
the received source information indicates an external source 
connected via the network, the data control Unit 809 outputs the 
received content identification and the usage infprmation of the 
content to the accounting processing unit 808 . The data control 
unit 809 performs the judgement on whether the usage is 
available after the accounting process by the accounting 
processing unit 808 is complete. Then, when having judged that 
the usage is available based on the rights inf oirmation, the data 
control unit 809 instructs the type transformation unit 810 to 
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transform the type of the content identified by the received 
content identifier to the type of the record medium loaded into 
the type transformation unit 810 and to write the content with 
the , transfoimed type to the record medium, and outputs the 
received content identifier to the type transformation unit 
810. 

Format Transformation U nit 810 

The type transformation unit 810 includes a writing 
unit for writing data to the record medixim 811- 

Having received a content identifier and an 
instruction to transform the type from the data control unit 
809, the type transformation unit 810 reads out a content 
identified by the received content identifier from the data 
storage unit 805, transforms the type of the read-^out content to 
the type of the record medium 811 loaded into the type 
transformation unit 810, and writes the content with the 
transformed type to the record medioam 811. 
Record Medium 811 

The record medixna 811, which is achieved by a 
semiconductor memory, DVD-EIAM or the like, is loaded into the 
type transformation unit 810. The record medium 811 records 
contents whose type has been transformed by the type 
transformation unit 810. 

2.2 Qneration of Data Management Apparatnc^ ftnn 

The operation of the data management apparatus 800 
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will be explained with reference to the flowchart shown in FIG. 
12. 

The input unit 812 receives the source information^ 
a content identifier, and the usage information input by the 
5 user. The data type identification unit 801 obtains a 
circulation content identified by the received content 
identifier from an external source or reads out a not-encrypted 
content identified by the received content identifier from a CD 
or a DVD (step SlOOl) . 

10 When having received the information indicating that 

the sent content has been read from CD from the data type 
identification unit 801 (step S1002) , the data type recording 
tmit 802 reads out rights information from the rights management 
tcQDle 803/ reads out an encryption method and an encryption key 

15 generation method from the control method table 813, generates 
an encryption key, outputs the received not-encrypted content, 
the read-out encryption method, the generated encryption key, 
and the file name to the encrypting vinit 804. The encrypting 
tmit 804 encrypts the received not-encrypted content using the 

20 received encryption key and based on the received encryption 
method to generate an encrypted content, then writes the 
generated encrypted content to the data storage unit 805 (step 
S1006) . The data type recording unit 802 writes the data ID, 
encryption information, rights information, file name, and data 

25 type to the multi data management table 807 (step S1007) . 
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When having received the information indicating that 
the sent content is a circulation content from the data type 
identification unit 801 (steps S1002 and 31003)^ the data type 
recording unit 802 writes the data ID, encryption information, 
5 rights infonaatipn, file name, and data type to the multi data 
management table 807 (step S1004), then writes the received 
circulation content to the data storage unit 805 using the file 
name of the received file A (step S1005) . 

Now, the operation of the data management apparatus 

10 800 of writing a content to the record medium 811 will be 
described with reference to the flowchart shown in FIG. 13. 

The data control unit 809 receives the source 
information and a content identifier, and the usage information 
from the input unit 812 (step SllOl) . The data control unit 809 

15 then judges whether the usage indicated by the received usage 
information is available by comparing the usage indicated by the 
received usage information with the rights information written 
in the same set as the received content identifier in the multi 
data management table 807 (step S1102) • When having judged that 

20 the usage is available arid further having judged that a copy is 
available based on the copy rights information, the data control 
unit 809 instructs the type transformation unit 810 to transform 
the type of the content identified by the received content 
identifier to the type of the record medium loaded into the type 

25 transformation unit 810 arid to write the content with the 
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transformed type to the record medium, and outputs the received 
content identifier to the type transformation unit 810. Having 
received these, the type transformation unit 810 reads out a 
content identified by the received content identifier from the 
5 data storage unit 805, transforms the type of the read-out 
content to the type of the record mediina 811 loaded into the 
type transformation unit 810, and writes the content with the 
transformed type to the record medium 811 (step S1103) . 

When having judged that the usage is not available 

10 (step S1102) and further having judged from the source 
information that the content has been read out from CD or DVD 
(step S1104), the data control unit 809 ends the process. 

When having judged that the usage is not availcJ^le 
(step S1102) and further having judged from the source 

15 information that the content has been received from an external 
source via the network (step S1104), the data control unit 809 
outputs the received content identification and the usage 
information of the content to the accounting processing unit 
808* The accounting processing imit 808, based on the received 

20 usage information, performs an accounting process in which the 
charge for the use of a content identified by the content 
identifier is payed to an external source, and receives the 
rights information in accordance with the payed usage charge 
from the external source, and then replaces the rights 

25 information, which is written in the poilti data management table 
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807 in the same set as the received content identifier, with the 
rights information received from the external source (step 
S1105) . The control moves to step S1102. In step 31102/ the 
data control unit 809 performs the. judgement on whether the 
usage is available again. Then, when having judged that a copy 
is available, the data control unit 809 writes the content to 
the record medium 811 • 
2t3 PQrtable Player 401 

After the record medium 811 is loaded into the 
portable plalyer 401, the portable player 401 reads out a content 
from the loaded record medixHU 811, plays the read-out content, 
and outputs the played content to the headphones 402. 
2/4 Brief Account 

AS described above, according to Embodiment 2, the 
data management apparatus 800 writes circulation contents, which 
have been obtained from external sources via the network and are 
composed of rights information and encryption information, to 
the data storage unit as they are. When having read out a 
content from a record medium such as CD, the data management 
apparatus 800 writes the content to the data storage unit only 
if it is an encrypted content, and writes a data type, rights 
information, and encryption information to the multi data 
management table. This construction relieves the data 
management apparatus 800 of the bothier of transforming the file 
type of the content read but from a record medium such as CD to 

35 



wo 00/62292 



PCT/JPOO/02229 



the file type of the circulation content by adding rights 
information and encryption information to it. This takes much 
of the load off the apparatus. 
2 Other Variations 
5 (1) In the above embodiments^ the data type "CD" may be replaced 
with "DVD-Video", "DVD-Music", or "circulation content including 
data of a plurality of different data types (e.g., music and 
images ) " . 

In the above embodiments , the record medium 811 may 
10 be achieved by a semiconductor memory card. However, it may be 
achieved by an MD or the like. 

(2) In the cd^ove embodiments, the data management apparatus 
obtains, via a network such as the Internet, a content which has 
been encrypted and includes rights information attached to it, 

15 However, the data management apparatus may obtain, via a 
network, a content which has not been encrypted and does not 
include rights information. In this case, the control method 
table 101 includes, in correspondency to this type of content, 
the same data storage method, encryption method, encryption key 

20 generation method, rights management method, and rights presence 
information as in correspondence to data type "CD" or "DVD". 
Also, when having received such a content, the data registration 
unit 104 generates an encryption key and encrypts the content in 
the same way as having received a content with data type "CD" or 

25 "DVD", outputs the encrypted content , to the data storage unit 
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106^ and writes the data ID, encryption information, rights 
information; and file name to the data management tadDle 105. 
(3) In the above embodiments, the following arrangement is 
possible. The type transformation unit 810 writes to the record 
S medium 811 rights information which indicates that the play is 
available, the copy is not available, and the move is not 
available. When the record medium 811 in which a content and 
the above rights information is recorded is loaded into the 
portable player 401, the portable player 401 reads out the 

10 rights infOCTiation from the record medium 811 and judges whether 
the play is available. When having judged that the play is 
available, th^e portable player 401 plays the content. When 
having judged that the play is not availcible, the portable 
player 401 does not play the content. 

15 (4) In the above embodiments, the play rights, copy rights, and 
move rights information respectively show whether the user is 
permitted to play, copy, or move the content, where ''available" 
indicates that the user is permitted to perform the operation, 
and "not available" indicates that the user is not penaitted to 

20 perform the operation. However, the play rights, copy rights, 
and move rights infonoation may include the number of permitted 
operations of play, copy, and move, respectively. In this case, 
the user is permitted to perform the operation as many times as 
the rights information indicates, and the number in the 

25 information is subtracted by one each time the user executes the 
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operation. 

Alternatively, the play rights, copy rights, and move 
rights information may each show a time limit for the operation. 
In this case, the user is permitted to perform the operation 
until the time limit has been reached. 

(5) In the above embodiments, the data management apparatus 800 
obtains music information via a network or from record mediums 
such as CD, and store, play, copy, or move the obtained music 
infoirmation. However, the data management apparatus 800 may 
deal with movie information including still image information, 
video information, sounds, and moving pictures, computer 
programs, character information, or multimedia information 
(e.g., HTML documents) which includes control information, 
character information, still images, moving images, and 
sovmds. 

(6) The present invention will be fulfilled by a method for 
achieving the above apparatuses. The present invention will 
also be fulfilled by a computer program which allows computers 
to execute the above method. The present invention will also be 
fulfilled by digital signals constituting the computer 
program. 

The present invention will also be fulfilled by a 
computer-- readable record medium (e.g., a floppy disk, a hard 
disk, a CD-ROM, an 1^0, a DVD, a DVD-ROM, a DVD-RftM, or a 
semiconductor memory) in. which the computer program or the 
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digital signals are recorded- Alternatively, the present 
invention will be fulfilled by the computer program or the 
digital signals recorded in the con^uter-readable record 
medium. 

5 The present invention will also be fulfilled by the 

computer program or the digital signals having been transferred 
via a network such as a telecommunication, a wired or wireless 
communication line, and the Internet. 

The computer program of the present: invention may be 
10 transferred to another stand-alone computer system via a record 
medium recording the computer program or via a network, so that 
the computer program is executed by the computer system. 
(7) The present invention may be fulifilled by combinations of 
the above embodiments and variations. 

15 INDUSTRIAL APPLTCABTLTTY 

The present invention can be used for a data 
management apparatus for use in a system, in which digital 
contents such as music or movies are circulated via a network 
(e.g., the Internet) or record mediums (e.g., CDs or DVDs) , to 
20 protect the digital content is from unauthorized play, copy, or 
move. 
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CLAIMS 

!• A data management apparatus for managing digital 
contents distributed in a market, with corresponding rights 
information, the data management apparatus comprising: 

a rights information storage means for prestoring a 
separate piece of rights inf oimation for each type of digital 
content, each piece of rights information including play rights 
information indicating whether . reproduction is , permitted for 
contents of the type corresponding to the piece of play rights 
information; 

a content storage means; 

a content obta^ining means for obtaining from an 
external source a digital content to which rights information 
has not been added; 

a type identification means for identifying a type of . 
the obtained digital content; 

a rights information reading means for reading rights 
information from the rights information storage means that 
corresponds to the type of the obtained digital content; 

a content writing means for writing the obtained 
digital content to the content storage means; and 

a rights information writing means for writing the 
read rights information to the content storage means so as to 
correspond to digital content written by the content writing 
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means • 

2. The data management apparatus of Claim 1, wherein 

the content writing means further adds the read rights 
information to the digital content written to the content 
5 storage means. 

3. The data management apparatus of Claim 1, wherein 

each piece of rights information further includes copy 
rights information indicating whether a check out is permitted 
or not/ wherein in each check out, a digital content and a piece 
10 of copy rights information corresponding to the digital content 
are copied to an external device. 

4. The data management apparatus of Claim 3, wherein 

each piece of copy rights information includes the 
number of permitted check outs. 

15 5. The data management apparatus of Claim 1,, wherein 

each piece of rights information further includes move 
rights information indicating whether a digital content and a 
piece of rights information corresponding to the digital content 
are permitted to be moved to an external device. 

20 6. The data management apparatus of Claim 1 further 
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comprising: 

a play means for obtaining a digital content and a 
piece of rights information corresponding to the digital 
content/ and playing the obtained digital content in accordance 
with the read piece of rights information. 

7. A data management method for use in a data management 
apparatus for managing digital contents distributed in a 
market, with corresponding rights information, the data 
management apparatus comprising a rights information storage 
means and a content storage means, the rights information 
storage means prestoring a separate piece of rights information 
for each type of digital content, each piece of rights 
information including play rights information indicating whether 
reproduction is permitted for contents of the type corresponding 
to the piece of play rights inf oirmation, the data management 
method comprising: 

a content obtaining step for obtaining from an 
external source a digital content to which rights information 
has not been added; 

a type identification step for identifying a type of 
the obtained digital content; 

a rights infonaation reading step for reading rights 
information from the rights information storage means that 
corresponds to the type of the obtained digital content; 
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a content writing step for writing the obtained 
digital content to the content storage means; and 

a rights information writing step for writing the read 
rights information to the content storage means so as to 
5 correspond to digital content written by the content writing 
means • 

8. The data management method of Claim 1, wherein 

in the content writing step, the read rights 
information is added to the digital content written to the 
10 content storage means. 

9. The data management method of ClkdLm 7, wherein 

each piece of rights information further includes copy 
rights information indicating whether a check out is permitted 
or not, wherein in each check out, a digital content and a piece 
15 of copy rights information corresponding to the digital content 
are copied to an external device. 

10. The data management apparatus of Claim 9, wherein 

each piece of copy rights information includes the 
number of permitted check outs . 

20 11. The data management apparatus of Claim 7, wherein 

each piece of rights information further includes move 
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rights information indicating whether a digital content and a 
piece of rights information corresponding to the digital content 
are permitted to be moved to an external device, 

12. The data management apparatus of Claim 7 further 
5 con^rising: 

a play step for obtaining a digital content and a 
piece of rights information corresponding to the digital 
content, and playing the obtained digital content in accordance 
with the read piece of rights information. 

10 13. A con¥>uter-readable record medixam storing a data management 
program for use . in a data management apparatus which manages 
digital contents distributed in a market, with corresponding 
rights information, the data management apparatus comprising a 
rights information storage means and a content storage means, 

15 the rights information storage means prestoring a separate piece 
of rights information for each type of digital content, each 
piece of rights infonaation including play rights information 
indicating . whether reprQduction is permitted for contents of the 
type corresponding to the piece of play rights information, the 

20 data management program comprising: 

a content obtaining step for obtaining a digital 
content from an external source; 

. a type identification step for identifying a type of 
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the obtained digital content; 

a rights information reading step for reading rights 
information from the rights information storage means that 
correisponds to the type of the obtained digital content; 

a content writing step for writing the obtained 
digital content to the content storage means; and 

a rights information writing step for writing the read 
rights information to the content storage means so as to 
correspond to digital content written by the content writing 
means . 

14. The data management method of Claim 13, wherein 

in the content writing step, the read rights 
information is added to the digital content written to the 
content storage means. 

15. The data management method of Claim 13, wherein 

each piece of rights information fiirther includes copy 
rights information indicating whether a check out is permitted 
or not, wherein in each check out, a digital content and a piece 
of copy rights information corresponding to the digital content 
are copied to an external device. 

16. The data management apparatus of Claim 15, wherein 

each piece of copy rights information includes the 
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ntUDber of permitted check outs. 

17. The data management apparatus of Claim 13, wherein 

each piece of rights information further includes move 
rights information indicating whether a digital content and a 
5 piece of rights information corresponding to the digital content 
are permitted to be moved to an external device. 

18. The data management apparatus of Claim 13 further 
comprising: 

a play step for obtaining a digital content and a 
10 piece of rights information corresponding to the digital 
content^ and playing the obtained digital content in accordance 
with the read piece of rights information. 
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